Elastic Security v9.4 introduces Entity Analytics Watchlists, a new capability in the Entity Analytics suite that lets security teams create named, weighted lists of users,…
Threat hunting has always been a human art; a practitioner staring at logs, forming a hypothesis, and patiently chasing it down. What if the hardest…
There’s an uncomfortable truth in security analytics that nobody talks about at conferences: The quality of your detections, alerts, and investigations is only as good…
Choosing the right antivirus (AV) tool can be a real headache. With so many options available, how do you know which one is the right…
The idea of “persistence” in a cloud environment is not a well-studied topic. At most, you hear instances of the attacker creating backup logins to…
Entity Analytics is a core security analytics capability that extends Elastic Security from event-centric to entity-centric investigation. By focusing on critical entities, such as users,…
On August 5, Huntress was made aware of the recently uncovered vulnerability tracked as CVE-2023-39143. For overall statistics, in our partner base we have over…
Small and medium businesses are changing their security stance for the better. There are still some stragglers, but they tend to be brought forward by…
On August 7, 2023, Huntress caught a business email compromise (BEC) that would have scammed us out of more than $100,000 had it gone undetected.…
Information security has long been divided into two primary disciplines: host-based and network-focused endeavors. While some sub-disciplines emerged over time, such as application or cloud…
The Huntress team is always keeping our eye on the evolving threat landscape. Now, it seems that a new contender, referred to as “INC” has…
Having an antivirus program is like having a lock on your front door—it’s a basic step and foundation for your overall security posture. However, they…
